CVE-2025-28229

PoC —

CVSS 3.1

9.8 critical

EPSS

<1%p54

Published

Apr 18, 2025 (Apr 18, 2025)

Modified

Jun 17, 2026

Description

Incorrect access control in Orban OPTIMOD 5950 Firmware v1.0.0.2 and System v2.2.15 allows attackers to bypass authentication and gain Administrator privileges.

Vendors: orban
Products: optimod 5950 firmware
Weakness: CWE-284
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.